# Build-only tools: not part of the image, not distributed (no licence obligation); listed so the
# build can be reproduced (RFC 005 §7 tools.txt).

## builder images (guest/images.lock)
DEBIAN_IMAGE=docker.io/library/debian@sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f  # trixie-slim
RUST_IMAGE=docker.io/library/rust@sha256:2752b332db73fdbb7dc576f06c82ed1f312005784ef913d7e04a28f5f55dc581  # 1.99.0-slim-trixie
ALPINE_IMAGE=docker.io/library/alpine@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6  # 3.24 (3.24.2)
DEBIAN_SNAPSHOT=20261010T000000Z

## Alpine build-only packages (apk.lock set build)
binutils 2.45.1-r1 bbfe6325fcf280467f09940530b2cfc1ca35563da313be073e02a42c95be2207 https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/binutils-2.45.1-r1.apk
jansson 2.15.0-r0 835e58892c8e6edf0d3c2a45412be8937aa83b7670db106172de781f2686b95c https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/jansson-2.15.0-r0.apk
openjdk25-jdk 25.0.4_p7-r0 2c915872ef2ba4726317e69d398bb9a88a2073c47d0cf901a7f6029f196265a6 https://dl-cdn.alpinelinux.org/alpine/v3.24/community/riscv64/openjdk25-jdk-25.0.4_p7-r0.apk
openjdk25-jmods 25.0.4_p7-r0 c65da806766ea17e841f91090144c5f7007f37b1cf9b4c343b516ef9d613a36b https://dl-cdn.alpinelinux.org/alpine/v3.24/community/riscv64/openjdk25-jmods-25.0.4_p7-r0.apk
openjdk25-jre-headless 25.0.4_p7-r0 30ff7cd99564b550659c500948d1d959bf3dd88744cd0fe38fe4f983b625c100 https://dl-cdn.alpinelinux.org/alpine/v3.24/community/riscv64/openjdk25-jre-headless-25.0.4_p7-r0.apk
zstd-libs 1.5.7-r2 6d1b83640dae191c1efb34cbef49fafe6eda507c49232efa4948c8dfad4eab87 https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/zstd-libs-1.5.7-r2.apk

## kernel builder packages (Debian snapshot)
apt 3.0.3
base-files 13.8+deb13u7
base-passwd 3.6.7
bash 5.2.37-2+b10
bc 1.07.1-4+b1
binutils 2.44-3
binutils-aarch64-linux-gnu 2.44-3
binutils-common 2.44-3
binutils-riscv64-linux-gnu 2.44-3
bison 2:3.8.2+dfsg-1+b2
bsdutils 1:2.41.5-0+deb13u1
ca-certificates 20250419
coreutils 9.7-3
cpp 4:14.2.0-1
cpp-14 14.2.0-19
cpp-14-aarch64-linux-gnu 14.2.0-19
cpp-14-riscv64-linux-gnu 14.2.0-19cross1
cpp-aarch64-linux-gnu 4:14.2.0-1
cpp-riscv64-linux-gnu 4:14.2.0-1
dash 0.5.12-12
debconf 1.5.91
debian-archive-keyring 2025.1
debianutils 5.23.2
diffutils 1:3.10-4
dpkg 1.22.22
findutils 4.10.0-3
flex 2.6.4-8.2+b4
gcc 4:14.2.0-1
gcc-14 14.2.0-19
gcc-14-aarch64-linux-gnu 14.2.0-19
gcc-14-base 14.2.0-19
gcc-14-cross-base 14.2.0-19cross1
gcc-14-riscv64-linux-gnu 14.2.0-19cross1
gcc-14-riscv64-linux-gnu-base 14.2.0-19cross1
gcc-aarch64-linux-gnu 4:14.2.0-1
gcc-riscv64-linux-gnu 4:14.2.0-1
grep 3.11-4+b1
gzip 1.13-1+deb13u1
hostname 3.25
init-system-helpers 1.69~deb13u1
libacl1 2.3.2-2+b1
libapt-pkg7.0 3.0.3
libasan8 14.2.0-19
libasan8-riscv64-cross 14.2.0-19cross1
libatomic1 14.2.0-19
libatomic1-riscv64-cross 14.2.0-19cross1
libattr1 1:2.5.2-3
libaudit-common 1:4.0.2-2+deb13u1
libaudit1 1:4.0.2-2+deb13u1
libbinutils 2.44-3
libblkid1 2.41.5-0+deb13u1
libbsd0 0.12.2-2
libbz2-1.0 1.0.8-6
libc-bin 2.41-12+deb13u4
libc-dev-bin 2.41-12+deb13u4
libc6 2.41-12+deb13u4
libc6-dev 2.41-12+deb13u4
libc6-riscv64-cross 2.41-11cross1
libcap-ng0 0.8.5-4+b1
libcap2 1:2.75-10+deb13u1+b3
libcc1-0 14.2.0-19
libcrypt-dev 1:4.4.38-1
libcrypt1 1:4.4.38-1
libctf-nobfd0 2.44-3
libctf0 2.44-3
libdb5.3t64 5.3.28+dfsg2-9
libdebconfclient0 0.280
libgcc-14-dev 14.2.0-19
libgcc-14-dev-riscv64-cross 14.2.0-19cross1
libgcc-s1 14.2.0-19
libgcc-s1-riscv64-cross 14.2.0-19cross1
libgdbm-compat4t64 1.24-2
libgdbm6t64 1.24-2
libgmp10 2:6.3.0+dfsg-3
libgomp1 14.2.0-19
libgomp1-riscv64-cross 14.2.0-19cross1
libgprofng0 2.44-3
libhogweed6t64 3.10.1-1
libhwasan0 14.2.0-19
libisl23 0.27-1
libitm1 14.2.0-19
libitm1-riscv64-cross 14.2.0-19cross1
libjansson4 2.14-2+b3
liblastlog2-2 2.41.5-0+deb13u1
liblsan0 14.2.0-19
liblsan0-riscv64-cross 14.2.0-19cross1
liblz4-1 1.10.0-4
liblzma5 5.8.1-1+deb13u1
libmd0 1.1.0-2+b1
libmount1 2.41.5-0+deb13u1
libmpc3 1.3.1-1+b3
libmpfr6 4.2.2-1
libnettle8t64 3.10.1-1
libpam-modules 1.7.0-5
libpam-modules-bin 1.7.0-5
libpam-runtime 1.7.0-5
libpam0g 1.7.0-5
libpcre2-8-0 10.46-1~deb13u3
libperl5.40 5.40.1-6+deb13u1
libreadline8t64 8.2-6
libseccomp2 2.6.0-2
libselinux1 3.8.1-1
libsemanage-common 3.8.1-1
libsemanage2 3.8.1-1
libsepol2 3.8.1-1
libsframe1 2.44-3
libsmartcols1 2.41.5-0+deb13u1
libsqlite3-0 3.46.1-7+deb13u2
libssl3t64 3.5.7-1~deb13u3
libstdc++6 14.2.0-19
libstdc++6-riscv64-cross 14.2.0-19cross1
libsystemd0 257.13-1~deb13u1
libtinfo6 6.5+20250216-2
libtsan2 14.2.0-19
libtsan2-riscv64-cross 14.2.0-19cross1
libubsan1 14.2.0-19
libubsan1-riscv64-cross 14.2.0-19cross1
libudev1 257.13-1~deb13u1
libuuid1 2.41.5-0+deb13u1
libxxhash0 0.8.3-2
libzstd1 1.5.7+dfsg-1
linux-libc-dev 6.12.107-1
login 1:4.16.0-2+really2.41.5-0+deb13u1
login.defs 1:4.17.4-2
m4 1.4.19-8
make 4.4.1-2
mawk 1.3.4.20250131-1
mount 2.41.5-0+deb13u1
ncurses-base 6.5+20250216-2
ncurses-bin 6.5+20250216-2
openssl 3.5.7-1~deb13u2
openssl-provider-legacy 3.5.7-1~deb13u3
passwd 1:4.17.4-2
patch 2.8-2
perl 5.40.1-6+deb13u1
perl-base 5.40.1-6+deb13u1
perl-modules-5.40 5.40.1-6+deb13u1
readline-common 8.2-6
rpcsvc-proto 1.4.3-1+b1
sed 4.9-2+deb13u1
sqv 1.3.0-3+b2
sysvinit-utils 3.14-4
tar 1.35+dfsg-3.1
tzdata 2026c-0+deb13u1
util-linux 2.41.5-0+deb13u1
xz-utils 5.8.1-1+deb13u1
zlib1g 1:1.3.dfsg+really1.3.1-1+b1

## agent builder packages
rustc 1.99.0 (b940084d7 2026-09-28)
binary: rustc
commit-hash: b940084d7eb6a299eb4bfeb8e34901bc051e7ac4
commit-date: 2026-09-28
host: aarch64-unknown-linux-gnu
release: 1.99.0
LLVM version: 23.1.1
apt 3.0.3
base-files 13.8+deb13u7
base-passwd 3.6.7
bash 5.2.37-2+b10
binutils 2.44-3
binutils-aarch64-linux-gnu 2.44-3
binutils-common 2.44-3
binutils-riscv64-linux-gnu 2.44-3
bsdutils 1:2.41.5-0+deb13u1
ca-certificates 20250419
coreutils 9.7-3
cpp 4:14.2.0-1
cpp-14 14.2.0-19
cpp-14-aarch64-linux-gnu 14.2.0-19
cpp-14-riscv64-linux-gnu 14.2.0-19cross1
cpp-aarch64-linux-gnu 4:14.2.0-1
cpp-riscv64-linux-gnu 4:14.2.0-1
dash 0.5.12-12
debconf 1.5.91
debian-archive-keyring 2025.1
debianutils 5.23.2
diffutils 1:3.10-4
dpkg 1.22.22
findutils 4.10.0-3
gcc 4:14.2.0-1
gcc-14 14.2.0-19
gcc-14-aarch64-linux-gnu 14.2.0-19
gcc-14-base 14.2.0-19
gcc-14-cross-base 14.2.0-19cross1
gcc-14-riscv64-linux-gnu 14.2.0-19cross1
gcc-14-riscv64-linux-gnu-base 14.2.0-19cross1
gcc-aarch64-linux-gnu 4:14.2.0-1
gcc-riscv64-linux-gnu 4:14.2.0-1
grep 3.11-4+b1
gzip 1.13-1+deb13u1
hostname 3.25
init-system-helpers 1.69~deb13u1
libacl1 2.3.2-2+b1
libapt-pkg7.0 3.0.3
libasan8 14.2.0-19
libasan8-riscv64-cross 14.2.0-19cross1
libatomic1 14.2.0-19
libatomic1-riscv64-cross 14.2.0-19cross1
libattr1 1:2.5.2-3
libaudit-common 1:4.0.2-2+deb13u1
libaudit1 1:4.0.2-2+deb13u1
libbinutils 2.44-3
libblkid1 2.41.5-0+deb13u1
libbsd0 0.12.2-2
libbz2-1.0 1.0.8-6
libc-bin 2.41-12+deb13u4
libc-dev-bin 2.41-12+deb13u4
libc6 2.41-12+deb13u4
libc6-dev 2.41-12+deb13u4
libc6-dev-riscv64-cross 2.41-11cross1
libc6-riscv64-cross 2.41-11cross1
libcap-ng0 0.8.5-4+b1
libcap2 1:2.75-10+deb13u1+b3
libcc1-0 14.2.0-19
libcrypt-dev 1:4.4.38-1
libcrypt1 1:4.4.38-1
libctf-nobfd0 2.44-3
libctf0 2.44-3
libdb5.3t64 5.3.28+dfsg2-9
libdebconfclient0 0.280
libgcc-14-dev 14.2.0-19
libgcc-14-dev-riscv64-cross 14.2.0-19cross1
libgcc-s1 14.2.0-19
libgcc-s1-riscv64-cross 14.2.0-19cross1
libgmp10 2:6.3.0+dfsg-3
libgomp1 14.2.0-19
libgomp1-riscv64-cross 14.2.0-19cross1
libgprofng0 2.44-3
libhogweed6t64 3.10.1-1
libhwasan0 14.2.0-19
libidn2-0 2.3.8-2
libisl23 0.27-1
libitm1 14.2.0-19
libitm1-riscv64-cross 14.2.0-19cross1
libjansson4 2.14-2+b3
liblastlog2-2 2.41.5-0+deb13u1
liblsan0 14.2.0-19
liblsan0-riscv64-cross 14.2.0-19cross1
liblz4-1 1.10.0-4
liblzma5 5.8.1-1+deb13u1
libmd0 1.1.0-2+b1
libmount1 2.41.5-0+deb13u1
libmpc3 1.3.1-1+b3
libmpfr6 4.2.2-1
libnettle8t64 3.10.1-1
libpam-modules 1.7.0-5
libpam-modules-bin 1.7.0-5
libpam-runtime 1.7.0-5
libpam0g 1.7.0-5
libpcre2-8-0 10.46-1~deb13u3
libseccomp2 2.6.0-2
libselinux1 3.8.1-1
libsemanage-common 3.8.1-1
libsemanage2 3.8.1-1
libsepol2 3.8.1-1
libsframe1 2.44-3
libsmartcols1 2.41.5-0+deb13u1
libsqlite3-0 3.46.1-7+deb13u2
libssl3t64 3.5.7-1~deb13u3
libstdc++6 14.2.0-19
libstdc++6-riscv64-cross 14.2.0-19cross1
libsystemd0 257.13-1~deb13u1
libtinfo6 6.5+20250216-2
libtsan2 14.2.0-19
libtsan2-riscv64-cross 14.2.0-19cross1
libubsan1 14.2.0-19
libubsan1-riscv64-cross 14.2.0-19cross1
libudev1 257.13-1~deb13u1
libunistring5 1.3-2
libuuid1 2.41.5-0+deb13u1
libxxhash0 0.8.3-2
libzstd1 1.5.7+dfsg-1
linux-libc-dev 6.12.111-1
linux-libc-dev-riscv64-cross 6.12.38-1cross1
login 1:4.16.0-2+really2.41.5-0+deb13u1
login.defs 1:4.17.4-2
mawk 1.3.4.20250131-1
mount 2.41.5-0+deb13u1
ncurses-base 6.5+20250216-2
ncurses-bin 6.5+20250216-2
openssl 3.5.7-1~deb13u3
openssl-provider-legacy 3.5.7-1~deb13u3
passwd 1:4.17.4-2
perl-base 5.40.1-6+deb13u1
rpcsvc-proto 1.4.3-1+b1
sed 4.9-2+deb13u1
sqv 1.3.0-3+b2
sysvinit-utils 3.14-4
tar 1.35+dfsg-3.1
tzdata 2026c-0+deb13u1
util-linux 2.41.5-0+deb13u1
wget 1.25.0-2
zlib1g 1:1.3.dfsg+really1.3.1-1+b1

## rootfs builder packages (erofs-utils, e2fsprogs, ...)
acl-libs-2.3.2-r1
alpine-baselayout-3.7.2-r1
alpine-baselayout-data-3.7.2-r1
alpine-keys-2.6-r0
alpine-release-3.24.2-r0
apk-tools-3.0.8-r0
busybox-1.37.0-r31
busybox-binsh-1.37.0-r31
ca-certificates-bundle-20260909-r0
e2fsprogs-1.47.4-r0
e2fsprogs-extra-1.47.4-r0
e2fsprogs-libs-1.47.4-r0
erofs-utils-1.9.1-r0
libapk-3.0.8-r0
libblkid-2.42.3-r1
libcom_err-1.47.4-r0
libcrypto3-3.5.8-r0
libeconf-0.8.3-r0
libssl3-3.5.8-r0
libuuid-2.42.3-r1
lz4-libs-1.10.0-r1
musl-1.2.6-r2
musl-utils-1.2.6-r2
scanelf-1.3.9-r1
ssl_client-1.37.0-r31
tar-1.35-r5
zlib-1.3.2-r0

## agent toolchain (rustc -vV)
rustc 1.99.0 (b940084d7 2026-09-28)
binary: rustc
commit-hash: b940084d7eb6a299eb4bfeb8e34901bc051e7ac4
commit-date: 2026-09-28
host: aarch64-unknown-linux-gnu
release: 1.99.0
LLVM version: 23.1.1

## builder guest emulator
QEMU emulator version 10.0.0